It would be nice to disable public-internet database connections from non-Render services.